Announcing Cloudflare Wallets: The programmable wallet for the agentic Internet
Today, it is difficult for AI agents to try out new APIs. They often have to navigate through a login page designed for humans and…
Month: August 2026
Phishing service spoofs RingCentral to steal Microsoft 365 accounts
The Greatness phishing-as-a-service (PhaaS) platform has expanded from credential phishing to adversary-in-the-middle attacks and device-code phishing targeting Microsoft 365 accounts. The platform has been active…
Remote Scheduled Tasks Spread EtherRAT Across Compromised Windows Domain
EtherRAT has surfaced in a Windows domain intrusion tied to an affiliate of the Gentlemen ransomware operation. The campaign shows how a single foothold can…
TP-Link Zero-Touch Provisioning vulnerabilities – IT Security Guru
Forescout Vedere Labs research has uncovered 15 previously unknown vulnerabilities affecting TP-Link’s Omada Zero-Touch Provisioning (ZTP) ecosystem, warning that weaknesses in automated device deployment could…
Fake Open VSX Extensions Hijack AMD, Azure, Salesforce and Government Namespaces
Fake Open VSX extensions have hijacked high‑trust namespaces like AMD, Azure, Salesforce, Hyperledger, and a U.S. government agency on the Open VSX Registry, silently harvesting…
Kali365 Exploits Microsoft Device Login to Access US Corporate Data
Disclosure: This article was provided by ANY.RUN. The information and analysis presented are based on their research and findings. Kali365, a Phishing-as-a-Service (PaaS) platform, is…
Bank of America impersonators weaponize ScreenConnect, then make it hard to remove
A phishing campaign impersonating Bank of America (BoA) is underway, trying to trick Windows users into installing ScreenConnect remote access software and then making it…
Claude Mythos 5 Tried to Backdoor a Real Open-Source Project in Testing, Then Vouched for Itself
An agent running Anthropic’s Claude Mythos 5 spent 34 hours trying to get a malware dropper merged into a real open-source project during a cyber…
Payment fraud a ‘fully fledged’ transnational security threat, says think tank
Over half the world’s population are targeted by payment scams each week as authorised payment fraud becomes a “fully fledged” global security threat, rather than…
ACCC to consider mandatory domestic mobile roaming
The Australian Competition and Consumer Commission may soon force mobile network operators to share each other’s infrastructure, particularly in regional areas. As part of a…
Water Sector Cyberattacks Reportedly Hit at Least 12 States
The number of US states affected by the recent hacking campaign targeting water and wastewater facilities continues to grow. At least 12 states have been…
SMOKE#SCREEN Campaign Abuses ScreenConnect to Give Attackers Remote Control Access
SMOKE#SCREEN Campaign Abuses ScreenConnect to Give Attackers Remote Control Access Pierluigi Paganini August 05, 2026 SMOKE#SCREEN uses fake Zoom updates to install ScreenConnect RMM, giving…